Finding malware without AV, tools

Hello security analysts. I was given a laptop whose user supposedly clicked a malicious link from a spoofed email. I was given no other information/instruction than "try to see if anything bad happened. I only have a local user cred without admin priv. How should I go about finding any indication of compromise? So far, I tried Sysinternals Autoruns and did not find anything interesting. I'm going to try other sysinternals tools if I can find anything interesti g. I …

av cybersecurity malware tools